$ rpki-client -vvf rrdp.as214749.net/repo/as214749-paw/1/326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa File: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (raw, json) Hash identifier: eKfFEzgr+H6yF3j6egSuIVRG25C7FeWL17iAWbZC228= Subject key identifier: 1E:36:28:77:C8:05:20:98:0D:3B:90:A2:0E:B5:9B:A0:50:91:D1:CD Certificate issuer: /CN=66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C Certificate serial: 0696DEC190CCB5DD4A86DE7CF102CFDC5048A120 Authority key identifier: 66:BD:0C:10:13:5E:5D:BF:49:13:E2:EE:3F:2D:D9:D3:58:F9:F5:1C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer Subject info access: rsync://rrdp.as214749.net/repo/as214749-paw/1/326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa Signing time: Sun 01 Mar 2026 10:26:49 +0000 ROA not before: Sun 01 Mar 2026 10:21:49 +0000 ROA not after: Sun 28 Feb 2027 10:26:49 +0000 asID: 214749 IP address blocks: 2a11:f2c0:ffe0::/48 maxlen: 48 Validation: OK Signature path: rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 18:53:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:96:de:c1:90:cc:b5:dd:4a:86:de:7c:f1:02:cf:dc:50:48:a1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C Validity Not Before: Mar 1 10:21:49 2026 GMT Not After : Feb 28 10:26:49 2027 GMT Subject: CN=1E362877C80520980D3B90A20EB59BA05091D1CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:22:d9:21:75:97:19:dc:e8:7f:fe:d6:fd:e6: e2:5f:e3:38:b2:66:a0:3d:4f:f2:2c:d8:09:e3:a2: df:31:51:1f:63:a0:0c:6d:8a:f2:16:93:59:28:fb: 1d:48:0e:0d:36:2a:2d:36:f7:b5:04:d4:a6:29:37: f2:e1:90:c4:26:fb:ec:2a:e1:fa:96:36:5b:3b:8d: 64:f4:3f:0c:e6:ec:8c:7c:e8:dc:53:82:51:fc:ab: c5:14:4c:0a:eb:b5:7f:b2:1c:c6:b3:58:1e:c2:9d: 0f:1d:29:3d:35:1d:c3:3b:4c:5a:35:c2:20:30:7c: 47:16:83:33:8d:b9:8e:a5:03:0e:42:a4:e0:dc:48: 85:2f:c8:3c:f1:f4:60:a1:15:d7:54:91:2b:a6:fb: e0:31:13:71:aa:e6:0e:7c:37:c3:2e:88:0f:b9:7c: 31:c5:5d:36:8e:17:f4:ce:f6:40:c6:90:93:5b:41: 2c:1a:9a:80:97:bf:08:63:84:cb:97:08:76:f5:07: c8:59:bb:0e:6b:aa:4b:c6:04:50:73:8c:df:8f:49: 52:b2:99:bb:ed:bc:77:e4:07:86:68:77:11:3f:78: b0:2f:e9:35:d9:09:d8:3e:f5:b3:1c:c6:fe:3e:6e: 7d:8b:f1:87:5b:2a:28:09:d0:60:fc:01:31:b0:d9: 06:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:36:28:77:C8:05:20:98:0D:3B:90:A2:0E:B5:9B:A0:50:91:D1:CD X509v3 Authority Key Identifier: keyid:66:BD:0C:10:13:5E:5D:BF:49:13:E2:EE:3F:2D:D9:D3:58:F9:F5:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer Subject Information Access: Signed Object - URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f2c0:ffe0::/48 Signature Algorithm: sha256WithRSAEncryption 20:4e:ba:a6:06:2b:7d:88:ec:dc:33:89:3f:71:0a:5b:41:ea: 85:21:3b:97:a5:cc:ad:0d:c3:ca:19:91:cd:e7:5c:6d:d4:aa: 19:9c:8d:18:f1:7d:fb:89:97:89:cd:26:e1:67:ef:d1:83:8a: fd:ac:2b:3f:ea:b4:96:98:4f:6d:0e:ee:67:df:a3:f3:5f:85: 46:39:91:05:9f:b8:2d:ea:7f:06:e7:fc:d2:bf:dd:ca:a0:b9: 8a:56:ce:93:01:c1:8c:27:12:cc:a1:53:4b:fa:c2:13:58:54: 63:a1:f3:13:01:75:ac:f9:c8:be:fd:76:27:0a:e7:d9:2e:db: ef:6b:ac:91:94:c1:e2:a7:e4:12:4c:63:6a:fd:ef:2e:5a:75: cc:bd:e1:96:28:27:99:c5:46:0d:f0:51:5a:23:ad:30:2f:5f: 9b:89:b2:c5:6f:1b:d7:24:be:c4:83:1b:2e:0b:db:12:8a:55: d7:39:29:12:62:b6:45:6d:ba:14:6b:ac:79:f7:23:63:60:6d: af:e6:66:15:3b:98:2e:c7:00:78:7d:1f:1a:38:1d:17:23:2f: 86:88:9b:c5:77:fd:3a:ff:d0:b6:62:af:16:97:14:2e:bf:f3: 25:9c:fd:29:ac:95:72:df:70:13:81:76:d8:06:c7:bc:5e:c8: 2e:4a:9b:94 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUBpbewZDMtd1Kht588QLP3FBIoSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZCRDBDMTAxMzVFNURCRjQ5MTNFMkVFM0YyREQ5RDM1 OEY5RjUxQzAeFw0yNjAzMDExMDIxNDlaFw0yNzAyMjgxMDI2NDlaMDMxMTAvBgNV BAMTKDFFMzYyODc3QzgwNTIwOTgwRDNCOTBBMjBFQjU5QkEwNTA5MUQxQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGItkhdZcZ3Oh//tb95uJf4ziy ZqA9T/Is2Anjot8xUR9joAxtivIWk1ko+x1IDg02Ki0297UE1KYpN/LhkMQm++wq 4fqWNls7jWT0Pwzm7Ix86NxTglH8q8UUTArrtX+yHMazWB7CnQ8dKT01HcM7TFo1 wiAwfEcWgzONuY6lAw5CpODcSIUvyDzx9GChFddUkSum++AxE3Gq5g58N8MuiA+5 fDHFXTaOF/TO9kDGkJNbQSwamoCXvwhjhMuXCHb1B8hZuw5rqkvGBFBzjN+PSVKy mbvtvHfkB4ZodxE/eLAv6TXZCdg+9bMcxv4+bn2L8YdbKigJ0GD8ATGw2QYhAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUHjYod8gFIJgNO5CiDrWboFCR0c0wHwYDVR0j BBgwFoAUZr0MEBNeXb9JE+LuPy3Z01j59RwwDgYDVR0PAQH/BAQDAgeAMGsGA1Ud HwRkMGIwYKBeoFyGWnJzeW5jOi8vcnJkcC5hczIxNDc0OS5uZXQvcmVwby9hczIx NDc0OS1wYXcvMS82NkJEMEMxMDEzNUU1REJGNDkxM0UyRUUzRjJERDlEMzU4RjlG NTFDLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzov L3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RkZTgzN2ZiLTYz OTAtNDFiNS04MmEwLWYwZDAyYzAzYTJjNi83LzY2QkQwQzEwMTM1RTVEQkY0OTEz RTJFRTNGMkREOUQzNThGOUY1MUMuY2VyMIGQBggrBgEFBQcBCwSBgzCBgDB+Bggr BgEFBQcwC4ZycnN5bmM6Ly9ycmRwLmFzMjE0NzQ5Lm5ldC9yZXBvL2FzMjE0NzQ5 LXBhdy8xLzMyNjEzMTMxM2E2NjMyNjMzMDNhNjY2NjY1MzAzYTNhMmYzNDM4MmQz NDM4MjAzZDNlMjAzMjMxMzQzNzM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqEfLA/+AwDQYJKoZI hvcNAQELBQADggEBACBOuqYGK32I7NwziT9xCltB6oUhO5elzK0Nw8oZkc3nXG3U qhmcjRjxffuJl4nNJuFn79GDiv2sKz/qtJaYT20O7mffo/NfhUY5kQWfuC3qfwbn /NK/3cqguYpWzpMBwYwnEsyhU0v6whNYVGOh8xMBdaz5yL79dicK59ku2+9rrJGU weKn5BJMY2r97y5adcy94ZYoJ5nFRg3wUVojrTAvX5uJssVvG9ckvsSDGy4L2xKK Vdc5KRJitkVtuhRrrHn3I2Ngba/mZhU7mC7HAHh9Hxo4HRcjL4aIm8V3/Tr/0LZi rxaXFC6/8yWc/SmslXLfcBOBdtgGx7xeyC5Km5Q= -----END CERTIFICATE-----Generated at Sat Mar 14 06:41:27 2026 by rpki-client